Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: N/DhHHIH57Ue4FrmbFJHQbl/HJnRcs53DRANldlepZk=
Subject key identifier: CC:1E:4C:A2:B4:9A:CE:60:30:C5:DC:8B:9A:3A:A5:75:B2:87:93:4B
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0196A2E4E114835F21E77CFA7BC96F371AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 091F
Signing time: Tue 06 May 2025 00:00:30 +0000
Manifest this update: Tue 06 May 2025 00:00:30 +0000
Manifest next update: Wed 07 May 2025 00:00:30 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: F0vG6bnIQnM5BycxohNfSLMSuC8ueHfUNfNiVNgHcEs=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:e1:14:83:5f:21:e7:7c:fa:7b:c9:6f:37:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: May 6 00:00:30 2025 GMT
Not After : May 7 00:00:30 2025 GMT
Subject: CN=cc1e4ca2b49ace6030c5dc8b9a3aa575b287934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:d9:29:f5:bc:35:e8:13:85:f8:85:37:78:
08:0f:d8:38:8a:47:3a:74:88:57:2c:67:8e:a4:22:
ac:fa:0f:07:6c:61:88:d5:ca:5d:75:d5:da:19:45:
d8:4f:eb:3a:9a:6b:79:95:28:8e:67:13:2f:9c:42:
28:31:bb:c1:7b:ae:b5:86:1d:9e:87:d0:03:56:bd:
1b:21:18:85:43:9f:10:98:3d:52:ad:53:16:42:d5:
a1:08:1e:cf:49:d5:f3:e1:fe:9c:9e:60:c5:13:66:
8e:ad:08:de:35:37:43:3c:4a:01:c2:fb:97:d2:b5:
44:59:4c:ef:77:49:53:10:84:f1:ef:ac:c2:d4:ed:
8f:5f:a6:f1:b3:f3:61:27:47:f1:07:56:51:0f:a7:
c7:25:32:a9:82:07:7f:2b:93:32:08:cd:8a:ee:50:
b6:bd:7f:8d:05:0e:3f:35:df:8d:4f:fe:49:b5:ec:
87:19:50:61:8f:8a:d3:8b:48:38:93:52:2e:ba:a5:
32:c6:a1:80:df:3a:9a:59:cd:b2:be:8f:22:f3:e4:
2e:b0:c6:e7:32:10:e6:9f:dc:7a:c4:b9:30:95:b9:
02:a2:40:a6:e3:d7:ad:0d:5d:c9:f4:4b:87:47:03:
6b:96:24:24:01:4a:57:6f:76:04:7f:39:94:17:ba:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:4C:A2:B4:9A:CE:60:30:C5:DC:8B:9A:3A:A5:75:B2:87:93:4B
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:df:88:d1:b2:5c:2e:d7:3a:d0:60:6d:bc:bc:b5:6f:63:
13:fc:52:32:f5:4c:a2:27:5f:4f:97:f0:0f:d2:af:05:e4:f4:
64:e3:aa:fd:30:91:b7:cb:b5:ef:cc:13:e5:ed:15:42:c3:eb:
65:d9:49:7d:c5:d2:75:2f:07:6c:14:04:f0:68:3e:b2:c1:8c:
55:30:48:0f:0a:c6:c8:36:af:3e:59:38:f7:77:23:50:ef:42:
af:0e:15:5c:5f:e0:e8:5a:90:5c:b9:39:11:be:de:fe:77:52:
93:2f:d3:10:64:f3:7e:be:7c:c3:1b:0c:c1:60:17:dc:98:b7:
68:79:1d:b4:6a:04:89:ea:98:9b:28:40:a0:8e:7e:15:5b:f2:
d3:53:df:51:ed:34:f3:49:82:d3:38:b0:51:44:e6:45:63:b9:
0e:ce:12:70:b8:f9:35:91:af:e6:16:79:21:a3:75:65:42:43:
ca:93:90:94:87:95:3a:16:82:2b:01:5a:89:59:2e:57:54:61:
cd:4f:e0:eb:6e:d6:9c:f0:95:e7:16:3e:fd:08:b9:90:22:c6:
d6:5b:9e:a0:bd:5a:94:b8:97:40:95:07:df:53:8b:a8:82:25:
85:25:b4:c3:5a:46:8f:0c:02:2a:0b:2e:19:15:df:d3:a2:97:
e0:98:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:01:07 2025 by rpki-client